PT-2002-2656 · Pingtel · Pingtel Xpressa

Name of the Vulnerable Software and Affected Versions: Pingtel Xpressa versions 1.2.5 through 2.0.1 Description: The issue allows remote attackers to avoid registering with the SIP registrar by exploiting predictable values in a Session Identification Protocol SIP request, specifically the Call-I...

iSMTP buffer overflow

Buffer overflow on oversized MAIL FROM:...

Bug in Opera and Konqueror

/----------------+--------------------------------------+------------- | sp00fed packet | | advisory 2 | +----------------+--------------------------------------+-------------+ | Product: multiply vendors browsers | | Vulnerability: buffer overflow | | Danger: low |...

CVE-2002-0910: Undefined Security Weakness

Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities 1 linux-ftpd, 2 pcnfsd, 3 tftp, 4 traceroute, or 5 from/to...

CVE-2002-0751: Undefined Security Weakness

CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified 1 form-to, 2 form-from, and 3 form-results parameters...

memberlist.php of vBulletin

vBulletin ALL versions Vendor status: notified 3/18/2; no response Within the first few lines of code in memberlist.php, the variable $letterbits is evaled. Because of the way PHP initializes variables, we can inject HTML, or JavaScript into the document. So by directing a user to, for example:...

CVE-1999-1542

CVE-1999-1542 affects RPMMail prior to 1.4. An attacker can remotely run commands by sending an e‑mail containing shell metacharacters in the MAIL FROM command, indicating a remote code execution vulnerability caused by unsanitized input in the mail command path. The provided documents do not spe...

CVE-1999-1542: Undefined Security Weakness

RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command...

CVE-2001-0631: Undefined Security Weakness

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...

OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...

CVE-2001-0494

IPSwitch IMail SMTP Buffer Overflow (CVE-2001-0494) affects IMail Server 6.06 and earlier. The OpenVAS/Nessus/NVD entries describe a vulnerability in theIMail SMTP daemon where inadequate bounds checking on input passed to the Mailing List handler allows remote attackers to remotely execute arbit...

CVE-2001-0494: Undefined Security Weakness

Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header...

CVE-1999-1190: Undefined Security Weakness

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message...

CVE-1999-1516: Undefined Security Weakness

A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string...

CVE-1999-1521: Undefined Security Weakness

Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server...

CVE-2001-0631

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users...

CVE-2001-0410: Undefined Security Weakness

Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header...

CVE-2001-0070: Undefined Security Weakness

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command...

CVE-2000-0738: Undefined Security Weakness

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . period at the end, which causes WebShield to continuously send itself copies of the e-mail...

CVE-2000-1244: Undefined Security Weakness

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection...